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Gordon MacDonald 
Office of the Attorney General 
33 Capitol St. 

Concord, NH 03301 

Re: Incident Notification 

Dear Attorney General MacDonald: 

I am writing on behalf of my client, the Smith Freed & Eberhard, P.C. (“SFE”), to notify 
you of a security incident involving one New Hampshire resident.* 

SFE discovered a potential information security incident at the firm on July 26, 2018. SFE 
immediately launched an investigation and engaged a leading cyber security and forensics firm to 
help contain and investigate the incident. On August 17, 2018, the investigation determined that 
the name and Social Security number of one New Hampshire resident may have been acquired 
without authorization. After this date, SFE continued its investigation of the incident and 
immediately began to verify the personal information involved and prepare notifications. 

In accordance with N.H. RSA § 359-C:20(IV), on Friday, September 21, 2018, SFE will 
mail a notification letter to one New Hampshire resident that may have been affected by this 
incident. A copy of the notification letter is attached. SFE will be offering the individual a 
complimentary, one-year membership to credit monitoring and identity theft protection services 
through Experian. SFE is also providing a dedicated call center that customers can contact with 
any questions they may have. 

To help prevent a similar incident from happening in the future, SFE is reviewing its 
information security policies and procedures and working to further improve its security controls. 


’ This report is not, and does not constitute, a waiver of personal jurisdiction. 

Atlanta Chicago Cincinnati Cleveland Columbus Costa Mesa Denver 

Houston Los Angeles New York Orlando Philadelphia Seattle Washington, DC 



September 21,2018 
Page 2 


Please do not hesitate to contact me if you have any questions regarding this matter. 
Sincerely, 

Anthony P. Valach 
Counsel 
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<FIRST NAME> <LAST NAME> 

<ADDRESS 1> 

<ADDRESS 2> 

<CITY>, <STATE> <ZIP CODE> 

September 21,2018 


Dear <FIRST NAME> <LAST NAME>, 

Smith Freed Eberhard, P.C., understeinds the importeince of protecting its employees’ personal information. Regrettably, 
this is to inform you of an incident that involved some of that information. This notice describes the incident, measures we 
have taken, and some steps you can take in response. 

We discovered a potential information security incident at the firm on July 26, 2018. We immediately launched an 
investigation and engaged a leading cyber security and forensics firm to help us contain and investigate the incident. On 
August 17, 2018, the investigation determined that your personal information was involved in the incident and that your 
name. Social Security number, and earnings information may have been acquired without authorization. After this date we 
continued our investigation of the incident and immediately began to verify the personal information involved and prepare 
notifications. 

To date, we have no information that any of your information has been misused. However, out of an abundeince of caution, we 
have notified the FBI, the IRS, and state taxing authorities of the incident. The IRS has indicated to us that they will 
monitor affected individuals’ returns to attempt to prevent fraudulent tax refunds from being paid out. 

As a precaution, we have also arranged for you to receive a complimentaiy one-year membership to Experian’s® 
Identity Works^*^ Credit Plus 3B. This product helps detect possible misuse of your personal information and provides you 
with identity protection services focused on immediate identification and resolution of identity theft. Credit Plus 3B is 
completely free to you and enrolling in this program will not hurt your credit score. For more information on identity theft 
prevention and Credit Plus 3B, including instructions on how to activate your complimentary one-year membership, 
please see the additional information provided in this letter. 

We regret that this incident occurred and apologize for any concern this may cause you. To help prevent something like 
this from happening again, we are reviewing our information security policies and procedures. Should you have further 
questions regarding this incident, please call (877) 600-6532 Monday through Friday between 8:00 a.m. and 5:00 p.m. 
Pacific Time. 


Sincerely, 



Jeff Eberhard 
Managing Partner 


Portland, Oregon Seattle, Washington 





Activate IdentityWorks Credit Plus 3B Now in Three Easy Steps 

If you believe there was fraudulent use of your information and would like to discuss how you may be able to resolve 
those issues, please reach out to an Experian agent at 877-890-9332. If, after discussing your situation with an agent, it is 
determined that Identity Restoration support is needed, then an Experian Identity Restoration agent is available to work 
with you to investigate and resolve each incident of fi-aud that occurred (including, as appropriate, helping you with 
contacting credit grantors to dispute charges and close accounts; assisting you in placing a freeze on your credit file with 
the three major credit bureaus; and assisting you with contacting government agencies to help restore your identity to its 
proper condition). 

Please note that this Identity Restoration support is available to you for one year from the date of this letter and does not 
require any action on your part at this time. The Terms and Conditions for this offer are located at 
www.ExperianIDWorks.com/restoration . You will also find self-help tips and information about identity protection at 
this site. 

While Identity Restoration assistance is immediately available to vou. we also encourage you to activate the fraud 
detection tools available through Experian’s IdentityWorks®*^ Credit Plus 3B as a complimentary one year membership. 
This product provides you with superior identity detection and resolution of identity theft. To activate your membership 
and start monitoring your personal information please follow the steps below: 

• Ensure that you enroll by: 12/31/18 (Your code will not work after this date.) 

• Visit the Experian IdentityWorks website to enoroll: www.exDerianidworks.com/3bplus 

• Provide your activation code: «Activation Code» 

If you have questions about the product, need assistance with identity restoration or would like an alternative to enrolling 
in Experian IdentityWorks online, please contact Experian’s customer care team at 877-890-9332 by 12/31/18. Be 
prepared to provide engagement number DB08721 as proof of eligibility for the identity restoration services by Experian. 

ADDITIONAL DETAILS REGARDING YOUR 12-MONTH EXPERIAN IDENTITYWORKS MEMBERSHIP: 

A credit card is not required for enrollment in Experian IdentityWorks. 

You can contact Experian immediately regarding any fraud issues, and have access to the following features once you 
enroll in Experian IdentityWorks: 

■ Experian credit report at signup: See what information is associated vnth your credit file. Daily credit reports 
are available for online members only.* 

■ Credit Monitoring: Actively monitors Experian, Equifax and Transimion files for indicators of fraud. 

■ Internet Surveillance: Technology searches the web, chat rooms & bulletin boards 24/7 to identify trading or 
selling of your personal information on the Dark Web. 

■ Identity Restoration: Identity Restoration specialists are immediately available to help you address credit and 
non-credit related fraud. 

■ Experian IdentityWorks ExtendCARE™: You receive the same high-level of Identity Restoration support 
even after your Experian IdentityWorks membership has expired. 

■ Up to $1 Million Identity Theft Insurance**: Provides coverage for certain costs and imauthorized electronic 
fund transfers. 

* Offline members will be eligible to call for additional reports quarterly after enrolling 

** Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of American International 
Group, Inc. (AIG). The description herein is a summary and intended for informational purposes only and does not 
include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, 
conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions 



Additional Steps You Can Take 


We recommend that you remain vigilant for incidents of fraud or identity theft by reviewing your account statements and 
free credit reports for any unauthorized activity. You may obtain a copy of your credit report, free of charge, once every 
12 months from each of the three nationwide credit reporting companies. To order your annual free credit report, please 
visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit 
reporting companies is as follows: 

Experian, PO Box 2002, Allen, TX 75013, www.experian.com. 1-888-397-3742 
TramUnion, PO Box 2000, Chester, PA 19016, www.transxmion.com. 1-800-916-8800 
Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com. 1-800-685-1111 

If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, 
you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your state. You 
can obtain information from these sources about steps an individual can take to avoid identity theft as well as information 
about fraud alerts and security freezes. You should also contact your local law enforcement authorities and file a police 
report. Obtain a copy of the police report in case you are asked to provide copies to creditors to correct your records. 
Contact information for the Federal Trade Commission is as follows: 

Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue NW, 

Washington, DC 20580,1-877-IDTHEFT ('438-4338'). www.ftc.gov/idtheft 








